Enum SeccompProfile 

pub enum SeccompProfile {
    Essential,
    Minimal,
    IoHeavy,
    Compute,
    Network,
    Unrestricted,
}

Seccomp filter profile.

Each profile includes all syscalls from profiles below it (cumulative): Essential < Minimal < IoHeavy < Compute < Network < Unrestricted

Variants

Essential

Essential — only the ~40 syscalls needed for process bootstrap (linker, glibc init, exit)

Minimal

Minimal — Essential + signals, pipes, timers, process control (~110 total)

IoHeavy

IO-heavy — Minimal + file manipulation (mkdir, chmod, rename, fsync, …)

Compute

Compute — IoHeavy + advanced scheduling and NUMA (sched_setscheduler, mbind, …)

Network

Network — Compute + sockets (socket, bind, listen, connect, …)

Unrestricted

Unrestricted — Network + privileged ops (ptrace, mount, bpf, setuid, …)

Implementations

impl SeccompProfile

pub fn all() -> Vec<Self>

Get all profiles

pub fn description(&self) -> &'static str

Get description of profile

Trait Implementations

impl Clone for SeccompProfile

fn clone(&self) -> SeccompProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SeccompProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SeccompProfile

fn eq(&self, other: &SeccompProfile) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SeccompProfile

impl StructuralPartialEq for SeccompProfile